OT / ICS • Safety-First • IRP Builder

OT-Specific Incident Response Plan (IRP)

Build and maintain an OT-focused IRP that prioritizes safety and production continuity, supports ICS/OT workflows, and documents roles, decision points, containment actions, and recovery steps.

Autosaves locally in your browser. No data is transmitted externally.

PLAN METADATA

Organization / Site

Plan Owner

Version

Effective Date

Review Frequency

Classification

1) PURPOSE AND SCOPE

Purpose

Scope

2) GUIDING PRINCIPLES

Safety and Operations First

3) INCIDENT SEVERITY AND TRIGGERS

Trigger Criteria (What starts this plan)

Severity Levels and Response Targets

4) ROLES AND RESPONSIBILITIES

Add roles that participate in OT incident response. Use “Owner” for the primary accountable role.

Role	Owner	Responsibilities	Action

5) OT RESPONSE WORKFLOW

Detection and Triage

Containment Decision Points

Eradication and Remediation

Recovery and Validation

6) COMMUNICATIONS AND ESCALATION

Who to Notify / When

7) EVIDENCE, LOGGING, AND DOCUMENTATION

Evidence Handling

Activity Logs and Decision Trail

8) POST-INCIDENT: LESSONS, IMPROVEMENTS, AND TRAINING

After-Action and Improvements

Developed by Durgesh Kalya. Educational use only. Feedback via LinkedIn.